users@glassfish.java.net

Re: securing glassfish admin console using ldap

From: <glassfish_at_javadesktop.org>
Date: Fri, 16 Jan 2009 01:53:20 PST

You would have to create the realm named "admin-realm" in domain.xml as an LDAP based realm as opposed to the default file realm :

<auth-realm classname="com.sun.enterprise.security.auth.realm.file.FileRealm" name="admin-realm">
          <property name="file" value="${com.sun.aas.instanceRoot}/config/admin-keyfile"/>
          <property name="jaas-context" value="fileRealm"/>
</auth-realm>

for example change the above to :

<auth-realm classname="com.sun.enterprise.security.auth.realm.ldap.LDAPRealm" name="admin-realm">
          <property name="directory" value="ldap://localhost:389"/>
          <property name="assign-groups" value="LDAPAuthorizedGroup"/>
          <property name="base-dn" value="dc=sun,dc=com"/>
          <property name="jaas-context" value="ldapRealm"/>
 </auth-realm>
[Message sent by forum member 'kumarjayanti' (kumarjayanti)]

http://forums.java.net/jive/thread.jspa?messageID=326409